pensionspenguin.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 2a:b6:f2:55:04:b2:28:49:09:77:e2:9e:7c:83:0d:30 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pensionspenguin.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:b6:f2:55:04:b2:28:49:09:77:e2:9e:7c:83:0d:30
Serial Number (int): 56777488930191021784194417023233756464
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): cb:ef:04:9f:da:0c:99:ee:f6:23:69:e3:3c:ab:08:9e:a5:db:10:21
Fingerprint (sha256): 08:b8:2c:98:da:80:37:58:53:62:52:53:38:91:72:8e:11:7f:17:d2:59:44:9d:af:7d:5b:a8:5b:df:7b:c3:56

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/lXq893Mb9o8
CRL Distribution Point: http://crls.pki.goog/gts1d4/3WiQwaWyyyo.crl

Check the revocation status for certificate pensionspenguin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pensionspenguin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pensionspenguin.com
www.quipsoteric.com
admin.appteck.de
www.mwata.site
sigerowatch.com
www.nuilea.com
cdnstatic.studiomiclavez.com
www.ajayusoft.com
admin.sso.app.criisp.io
www.70kgless.com
www.rantstats.com
nestepanemieni.lv
timkastelijns.com
wenkaifan.com
uppsalakalendern.se
www.kosmoschain.com
intrest.spried.com
www.seedsgame.com
lurawalling.resepipopuler.com
www.mymloks.com
suhashbollu.com
stackskull.com
www.wenkaifan.com
whichecommerce.com
vividmindsoft.com
www.completegolfcoach.in
xaxistarts.com
celsa-messgeraete.de
bullrunsportswear.com
talent.staging.castingapp.com
www.miyakosystemengineering.dev
fellpunzel.de
nlcorporation.in
portal.rgnt-motorcycles.com
www.glycanage.com
noblenetworks.io
popcharts.io
colorbot.io
auth0-mock.gotoloop.dev
www.thechatter.xyz
novadax.info
qawl.surprise.com
evaluation.dev.haleoclinic.com
www.itztheschitz.com
callfactor.net
auth.runblox.io
stoutekinderen.be
www.tabelasimetrica.pt
www.tuzlaoptik.com
www.trekngo.com
writell.speakster.in
app.cribbagepro.net
ivarsorri.se
green-studio.me
www.pre-launch.groomzy.pet
app.bitprices.org
www.dumbhead.me
cyberapocalyp.se
shamancoin.org
jardinlapedrera.com.mx
www.soppelmat.no
spidlife.smartholic.com
bingchathasbeenhackedbysrulyrosenblats.site
hpos10i-brinter.tech
payments.brandtenders.mx
inocat.com.br
www.gruensicht-eisenstadt.at
app.sono.world
www.fashionfreak.live
lricardo.space
layaranak.indonesiana.tv
www.randomjazz.me
goruntulusohbet.website
mehandesot.ynet.co.il
www.teamtogether.se
www.receptchecken.se
www.efidatos.com
www.evernest.io
www.koppelingafassvd.nl
pnmsolutions.eu
pscloud.dk
capitalmarket.poalimlinks.co.il
partner.ekioja.com
nobi-avd5-demo.ordreplan.no
dif.world
sudoku.thomas-zeitlhofer.eu
www.holded.com
aisw.de
a0hd.foodle.su
open-props.style
url.snlinebot.com
plix.sgtdi.com
renew-regenmed.com
www.quidio.co
upload.ptinsight.com
kiosko.christus.mx
pyrpop.starclinch.com
www.cpaiii.com
megavibex.com
ipnosia-nancy.smartof.app

Other certificates including the domain name pensionspenguin.com

(limited to 100 certificates)
www.andagram.com
pensionspenguin.com
api.pensionspenguin.com
ambrosia.alimentoscolombeia.com
www.creditoperola.digital
2rodas.app
lead.gettwoit.com
rostasan.com
jefferies.neoufitness.com
www.rohinigosain.com
next-api-beatjump.opalastudios.com
api.pensionspenguin.com
corpoclash.com
moosedept.org
loja.zambezi.co.mz
valeriopucciarelli.it
www.ipssantamaria.com.co
www.newtonsgame.com
mint.dgkingdom.io
redratel.com
callmanager.spont.cash
api.pensionspenguin.com
vespastg-link.25demo.com
agendaodonto.com
cooldipo.com
www.sikandersaleem.com
democraseek.com
www.gtaxi.com.co
ambrosia.alimentoscolombeia.com
active-base.ru
2rodas.app
caerulusvision.com
elliottnixon.com

Certificate

The complete raw certificate details for pensionspenguin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56777488930191021784194417023233756464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 09:11:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 10:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pensionspenguin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/lXq893Mb9o8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionspenguin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quipsoteric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.appteck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mwata.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigerowatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuilea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnstatic.studiomiclavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajayusoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sso.app.criisp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.70kgless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rantstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestepanemieni.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timkastelijns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenkaifan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppsalakalendern.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosmoschain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrest.spried.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedsgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lurawalling.resepipopuler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymloks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suhashbollu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stackskull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wenkaifan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichecommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividmindsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completegolfcoach.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xaxistarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celsa-messgeraete.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullrunsportswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talent.staging.castingapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miyakosystemengineering.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fellpunzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlcorporation.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.rgnt-motorcycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glycanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noblenetworks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcharts.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorbot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0-mock.gotoloop.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechatter.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novadax.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qawl.surprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaluation.dev.haleoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itztheschitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callfactor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.runblox.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoutekinderen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabelasimetrica.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuzlaoptik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trekngo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writell.speakster.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cribbagepro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivarsorri.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-studio.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-launch.groomzy.pet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bitprices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dumbhead.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberapocalyp.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamancoin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jardinlapedrera.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soppelmat.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spidlife.smartholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingchathasbeenhackedbysrulyrosenblats.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpos10i-brinter.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.brandtenders.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inocat.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruensicht-eisenstadt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sono.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionfreak.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lricardo.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layaranak.indonesiana.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randomjazz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goruntulusohbet.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehandesot.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamtogether.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.receptchecken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efidatos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evernest.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koppelingafassvd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnmsolutions.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pscloud.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalmarket.poalimlinks.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ekioja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobi-avd5-demo.ordreplan.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudoku.thomas-zeitlhofer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a0hd.foodle.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open-props.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.snlinebot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plix.sgtdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew-regenmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quidio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.ptinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosko.christus.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyrpop.starclinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpaiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megavibex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipnosia-nancy.smartof.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/3WiQwaWyyyo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7de6d3d90000040300483046022100b19869b681b30451f124118583d3e7a919ac7a403f6a2e51d702a1807449e4af02210091688cda33ca7d42c259ae1391939ceafa53e74e3a93a7486c5b364866df9185007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d7de6d4180000040300463044022016c34aac652902649da1fa9bd6c059bc460657fb94d80f98192dd7e0444ae3f30220583b5e4d514f226633c2c385a2583f4a6ad79e7f98b94cc0299e895c9dbd9bcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0046b0873402b82a3ea6d4e686676d428d78c95999eba54711365978822741c8a4c45a63803d13be33de5b0f54f12e624f21a6ee1085225ca6e2487dd99198495b1c1af2ded45a988c797cbd61d9d0526d77c56bba3662bf9e5e7232f81bd54e8192e18707828fa501329df966fa6923558272a8ebbe38d7cd99cce244a66fb3bdcba1c0c35750c35a9b2321eccdaa5e5cf3603f440055c9fee8dde92d8457ced056d47b6326f5e3f1b65109f5e032c9a0c056e856031c347bdbf6835a58f1d4d093bbe4de2d97398b24e7cf9d3d8e7dff7f264dc38ad4582918ebb1e9214d620ef7f8066751d6ac0fc0e4ca348529ab6a504c7e99c94cb00d49525ebf884fce77